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Principal  Investigator:  Dr.  Richard  P.  Levy 


INTRODUCTION 

The  broad  purpose  of  this  and  other  engineering  projects  planned  and  currently  underway 
at  Loma  Linda  University  Medical  Center  (LLUMC)  is  to  enhance  the  efficacy  of  proton 
radiation  therapy  and  to  expand  the  range  of  diseases  that  can  be  treated  by  this  modality. 
Before  LLUMC  built  the  world's  first  hospital-based  proton  treatment  center  in  1990, 
proton  therapy  was  limited  to  a  small  set  of  tumor  types  and  a  non-clinical  setting.  During 
the  last  decade  LLUMC  has  treated  over  6000  patients  with  proton  therapy  in  a  hospital 
environment,  and  in  the  process  has  expanded  the  range  of  treatment  protocols 
dramatically  [1-9].  If  LLUMC  is  to  treat  new  types  of  tumors  having  broad  regional 
disease  spread ,  such  as  breast,  lung,  and  lymphoma  tumors,  significant  upgrades  must  be 
made  to  the  facility's  technology. 

To  deliver  the  proton  beam  to  large  irregular  targets  with  high  precision  requires  the  use 
of  rapid  and  precise  variable  energy  changes.  This  project  will  provide  for  variable- 
energy  enhancements  of  the  accelerator  and  transport  system  (not  for  the  treatment 
room). The  engineering  upgrades  to  be  performed  will  permit  modulation  of  beam  energy 
on  a  spill-to-spill  basis  and  delivery  of  uniform  beam  intensity  over  an  extended 
extraction  period. 

These  goals  are  stated  broadly  in  the  STATEMENT  OF  WORK  in  the  original  proposal 
as  follows: 

Objective  1 :  Upgrade  the  LLU  proton  synchrotron  to  maximize  beam  intensity 
and  create  slow  extraction  capabilities,  producing  a  stable  beam  of  uniform 
intensity  to  satisfy  beam-scanning  requirements. 

Objective  2:  Upgrade  the  switchyard  to  be  capable  of  responding  to  the  variable 
energy  beam  characteristics  and  efficiently  deliver  the  beam  to  each  treatment 
room. 

The  specific  tasks  involved  in  achieving  these  objectives  are  better  described  in  the 
METHODS  section  of  the  original  proposal  than  in  the  STATEMENT  OF  WORK. 
Therefore,  the  progress  on  this  project  will  be  described  below  with  reference  to  the 
specific  tasks  outlined  in  the  METHODS  section. 


BODY 

The  plan  of  work  in  the  original  proposal  was  broken  down  into  9  tasks  in  the 
METHODS  section  (tasks  a  through  i).  Progress  on  each  task  will  be  described 
separately.  Please  refer  to  the  Gantt  chart  on  page  1 1  for  project  timeline  statuses. 
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a.  Enhance  the  synchrotron  extracted  beam  intensity  control  to  provide  uniform  extracted 
proton  beam  intensity  from  the  accelerator  with  the  goal  of  +/-  5%  uniformity  and  an 
intensity  selection  range  of  20  to  1 . 

1 .  Develop  an  injected  beam  intensity  control  system  via  debuncher  in  the 
injection  line. 

2.  Develop  instrumentation  for  monitoring  and  verifying  correct  beam  intensity 
within  the  synchrotron  ring  for  each  accelerator  cycle. 

(Tasks  al  and  a2  have  been  combined  into  a  single  project  and  will  be  described 
as  such). 

The  primary  goal  of  the  Injected  Intensity  project  is  to  control  and  measure  the 
quantity  of  protons  injected  into  the  accelerator  every  cycle.  The  control  will  be 
accomplished  by  adjusting  the  phase  of  the  RF  field  in  the  debuncher  cavity 
through  a  software  interface  that  will  run  automatically  in  the  background. 
Currently  the  controls  for  the  debuncher  are  manual  dials.  Hardware  will  be 
required  to  allow  the  software  to  control  the  debuncher. 

The  measurements  will  be  accomplished  by  sampling  the  signals  coming  from  the 
current  torroids  in  the  injection  line  and  ring  at  specific  times.  The  injection  level 
will  then  be  compared  in  software  with  the  level  that  was  requested  in  the 
treatment  plan.  If  it  is  not  within  tolerance,  the  spill  will  be  aborted.  Hardware 
will  be  required  to  condition  and  sample  the  signals  from  the  current  torroids. 

Work  performed  to  date: 

•  A  study  was  completed  that  determined  the  transfer  function  between  the 
current  from  the  dipole  holec  and  the  ring  frequency. 

•  A  study  was  completed  showing  that  the  RF  phase  shift  control  of  the 
debuncher  was  able  to  control  the  injected  intensity  over  the  required 
range. 

•  Hardware  was  tested  to  make  sure  that  it  could  sample  data  fast  enough 
and  in  the  correct  sequence  to  meet  safety  requirements.  Based  on  the 
results  we  were  able  to  specify  the  hardware  required  for  the  project. 

•  The  software  algorithm  was  tested  to  make  sure  that  it  could  do  the 
required  calculations  within  the  time  constraints  of  the  safety 
requirements. 

Proof  of  concept  studies  are  complete.  The  software  and  hardware  prototypes  of 
the  control  system  are  complete  and  testing  and  data  collection  will  begin  soon. 
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3.  Develop  enhancements  of  dipole  magnet  power  supplies  that  will  provide 
dynamic  response  for  reducing  ripple,  thereby  improving  the  stability  of  the 
extracted  beam. 

The  objective  of  this  task  is  to  reduce  the  noise  and  ripple  of  the  magnetic  field  in 
the  ring  dipoles  to  levels  that  enable  beam  stacking.  This  will  be  accomplished  by 
upgrading  the  “E”  supplies. 

Work  performed  to  date: 

A  study  performed  demonstrated  that  the  noise  and  ripple  can  be  dramatically 
reduced  by  synchronizing  the  SCR  firing  to  a  time  base  instead  of  synchronizing 
to  multiple  zero  crossing  points. 

4.  Develop  enhancements  of  ring  quadrupole  magnet  power  supplies  that  will 
provide  dynamic  response  for  reducing  ripple  and  improving  stability. 

A  modified  design  will  improve  stability  of  the  quadrupole  field  in  the  accelerator 
ring  during  extraction.  This  will  include  reducing  the  400Hz  ripple  in  the  “D” 
supplies. 

Work  performed  to  date: 

This  project  will  be  performed  in  year  2. 

5.  Add  extracted  beam  intensity  detector  for  use  in  feedback  system  for  enhancing 
control  and  uniformity  of  beam  spill. 

For  beam  scanning  to  function  it  must  be  able  to  deliver  a  specific  dose  to  an  area. 
This  occurs  in  one  of  two  ways:  dose  per  time  is  controlled  at  the  accelerator,  or 
dwell  time  per  area  is  controlled  by  the  scanning  magnets.  The  drawback  of 
changing  dwell  time  is  that  the  maximum  speed  of  the  scanning  magnets  must  be 
slowed  whenever  extraction  exceeds  the  average  rate. 

The  extraction  intensity  control  monitors  and  controls  the  extraction  of  protons 
from  the  accelerator  to  control  dose  extracted  per  time.  This  will  allow  the 
scanning  magnets  to  function  closer  to  their  maximum  scanning  frequency. 

Higher  scanning  frequency  will  allow  for  multiple  scans  delivering  less  dose  in 
the  same  time.  This  delivers  the  same  dose  but  allows  for  greater  averaging  so 
that  small  intensity  fluctuations  become  even  smaller. 

This  task  will  allow  any  arbitrary  extraction  profile  command  to  be  realized 
provided  the  extraction  profile  does  not  require  bandwidth  higher  than  the 
extraction  intensity  control  system.  A  static  command  will  be  used,  but  the 
system  is  built  to  support  future  commands  that  change  within  a  given  layer.  This 
will  allow  greater  control  of  delivered  dose. 
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Work  performed  to  date: 

•  Produced  controllable  extraction  (not  limited  to  specific  shape). 

•  Suppressed  extraction  indefinitely  (Previous  record  ~50ms). 

•  Controlled  500  ms  extraction,  (additional  time  for  scanning  up  from  1 50  ms) 

•  Produced  better  signal-to-noise  bandwidth  product  than  the  Fermi  model. 


b.  Implement  improved  control  of  the  10-degree  bending  magnet  downstream  of  the 
beam  dump.  Integrate  a  shunt  magnet  power  supply  into  the  beam  transport  control 
system  to  provide  independent  precision  adjustment  of  beam  transport  extraction  magnet, 
thus  eliminating  complex  trim  magnet  corrections  throughout  the  remaining  transport 
system. 

At  present,  a  pair  of  bending  magnets  between  the  accelerator  and  the  beam  transport  line 
are  both  controlled  by  the  same  power  supply.  Because  the  magnets  having  a  common 
power  source,  the  amount  of  beam-steering  capability  through  this  pair  is  limited.  This 
project  will  add  a  second  power  supply  to  shunt  current  away  from  the  second  of  the  two 
magnets,  thus  allowing  steering  at  an  additional  point  within  the  pair  and  reducing  the 
need  for  compensating  steering  magnets  farther  down  the  beamline. 

Work  performed  to  date: 

Testing  has  verified  that  the  addition  of  this  magnet  will  reduce  the  need  for 
compensating  magnets.  The  requirements  and  design  specifications  have  been  completed, 
and  integration  will  begin  soon. 


c.  Develop  software  applications  to  provide  dynamic  accelerator  energy  changes  for 
achieving  spill-to-spill  beam  delivery.  Also  perform  interpolation  of  magnet  ramps  from 
small  set  of  discrete  energies  to  achieve  continuously-variable  energy  capability. 

In  order  to  implement  active  beam  scanning  (Bragg-peak  stacking),  the  PBTS  must 
support  a  wide  range  of  energies  it  is  capable  of  delivering  in  one  treatment.  The  purpose 
of  this  task  is  to  modify  the  existing  software  control  system  to  support  multiple  segments 
in  one  beam  delivery  process.  The  modified  software  pre-calculates  the  necessary 
parameters  for  all  specified  segments  and  distributes  the  information  between  all  modules 
in  the  PBTS.  The  Segment  List  also  contains  multi-leaf  collimator  information  to  support 
future  multi-leaf  collimator  devices. 

Work  performed  to  date: 

•  Developed  calibration  factors  interpolation  algorithm  based  on  energy,  intensity,  cone 
size,  scatter  1  and  2  positions 

•  Developed  treatment  parameter  distribution  and  verification  and  selection  protocol 


7 


Principal  Investigator:  Dr.  Richard  P.  Levy 


•  New  software  is  capable  of: 

•  Configuring  one  or  more  energies  from  a  palette  of  1 8000  in  one  delivery 

•  Stacking  Bragg-peaks,  allowing  for  more  precise  treatments  without  modulator 
propeller;  and 

•  Delivering  multi-leaf  collimator  protocols  (not  supported  by  hardware),  which 
would  allow  delivery  of  an  arbitrarily  shaped  fields  without  manufacturing  of 
apertures. 

•  System  supports  active  scanning  protocols  (not  supported  by  hardware,  additional 
software  modules  required  to  control  new  hardware),  allowing  precision  treatments 
without  passive  beam  degrading  devices. 


d.  Develop  an  integrated  fast  beam  cut-off  system  to  safely  inhibit  proton  beam  from 
scanning  outside  targeted  volume.  Develop  a  hardwired  system  capable  of  delivering 
proton  beam  within  approximately  100  psec  of  planned  request  and  will  allow  beam 
delivery  to  be  quickly  interrupted  as  needed  to  end  normal  active  beam  delivery,  as  well 
as  terminate  beam  under  unsafe  conditions. 

Beam  scanning  produces  a  much  more  intense  beam  spot  than  passive  scattering, 
requiring  faster  abort  capability.  The  abort  system  protects  the  patient  from  unintended 
radiation.  This  “abort”  signal  will  be  produced  by  the  selection  verification  portion  of  the 
safety  system.  The  actuator  will  be  an  existing  single-turn  magnet  that  was  designed  for 
fast-abort  but  was  never  integrated  into  the  control  system. 

Work  performed  to  date: 

Initial  work  has  focused  on  fixing  the  existing  fast  abort  device,  locating  its 
documentation  and  defining  the  interface  between  it  and  the  new  selection  verification 
board.  New  firmware  has  been  written  for  the  new  selection  verification  board,  which 
will  allow  it  to  interface  with  the  fast  abort  device. 


e.  Perform  the  synchrotron  sextupole  magnet  installation. 

This  task  will  not  be  performed  under  this  proposal.  The  sextupoles  were  purchased  and 
installed  using  non-DOD  funding. 


f.  Implement  design  of  an  accelerator  control  console  providing  ergonomic  display 
equipment  layout  and  integrated  equipment  racks  and  control  cabling. 

This  task  includes  the  modeling  of  the  key  equipment,  racks,  and  associated  hardware; 
establishing  and  documenting  the  new  equipment  layout  and  associated  schematic 
changes;  and  procuring  and  installing  this  new  equipment 

Work  performed  to  date: 
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This  project  is  still  in  early  preliminary  design  stages.  The  basic  component  modeling 
has  been  completed  and  preliminary  layouts  are  underway. 


g.  Develop  test  and  diagnostic  utilities  with  graphical  user  interface  to  ensure  proper 
functioning  of  the  accelerator  timing  system  and  the  beam  profile  detectors  (Multi- 
Segmented  Ion  Chambers)  in  the  switchyard. 

In  order  to  minimize  the  time  to  recognize,  locate  and  fix  a  system  failure  (in  a 
component,  embedded  system,  or  functional  area),  a  set  of  diagnostic  graphical  user 
interfaces  is  being  created  for  use  by  field  service  personnel. 

Work  performed  to  date: 

The  following  utilities  have  been  developed: 

•  Detector  System  Diagnostic  -  provides  set  of  commands  necessary  to 
troubleshoot  the  detector  system,  including  Recycling  Integrator,  Preset  Scalar 
boards,  detector  state  machine,  proctor  and  monitor. 

•  Power  Supply  System  Diagnostic  -  includes  commands  to  set,  read  and  modify 
settings  for  arbitrary  power  supplies.  Shows  operating  parameter  values  not 
otherwise  available  through  treatment  tools 

•  MSIC/MWIC  diagnostic  application  -  troubleshoots  Multi-Segment  Ion 
Chambers  and  Multi-Wire  Ion  Chamber  devices. 

•  Gantry  Motion  System  Diagnostic  Application  -  allows  users  to  issue  various 
commands  associated  with  gantry  motion  system 

•  Motions  Systems  Diagnostic  Application  -  services  motion  devices  in  the 
treatment  nozzle  (x-ray  tube,  scatterer  1,  scatterer  2,  modulation  wheel  propeller, 
etc.) 

•  VME  bus  Clock  Generator  Diagnostic  Application  -  programs  and  verifies  VCG 
board  (PBTS  timing  system) 

•  VME  bus  Clock  Timer  Diagnostic  Application  -  programs  and  verifies  VCT 
board  (PBTS  timing  system) 

•  VxWorks™  Monitor  Diagnostic  Application  -  monitors  dynamic  memory  in 
VME  creates 

•  High  Voltage  System  Diagnostic  Application  -  provides  range  of  commands 
necessary  to  set,  monitor  and  troubleshoot  the  high  voltage  supplies  for  the 
detector  electronics. 

•  Selection  Verification  Diagnostic  Application  -  services  selection  verification 
board 

•  Dipole  Switch  Controller  Diagnostic  Application  -  services  DSC  board. 

h.  Develop  an  accelerator  and  beam  transport  control  system  configuration  management 
tool  for  maintaining  control  settings  and  limits  for  treatment,  calibration  and 
commissioning  modes  of  operation. 
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The  goal  of  the  Proton  Beam  Therapy  System  Configuration  Management  System  is  to 
maintain  control  settings  and  limits  for  treatment  and  non-treatment  modes  of  operation 
while  maintaining  data  integrity.  It  provides  a  WIMP  (Windows,  Icon,  Mouse,  Pointer) 
Graphical  User  Interface  for  user-friendly  interaction  with  the  system. 

The  system  requires  user  authentication  and  distinguishes  between  privileges  for  each  of 
the  authorized  users.  Authorized  users  have  permissions  to  propose  changes  to  the 
treatment  data  set  or  apply  changes  to  non-treatment  sets.  The  Clinical  Configuration 
Manager  has  the  responsibility  of  approving  or  rejecting  proposed  changes  to  treatment 
data.  This  system  will  improve  reliability  by  providing  a  mechanism  for  maintaining  data 
integrity. 

In  the  current  system,  if  the  configuration  tool  is  offline,  beam  delivery  is  prevented  to 
any  of  the  nozzles.  The  PBTS  Configuration  Management  System  will  minimize 
downtime  by  eliminating  this  single  point  failure. 

Work  performed  to  date: 

The  requirements,  design,  and  initial  code  development  are  complete.  The  project  is 
currently  in  detailed  testing  mode. 


i.  Enhance  the  beam  transport  magnet  power  supply  and  electronic  control  system 
command  and  readback  accuracy  and  repeatability  needed  for  precision  active  beam 
treatments. 

Effective  beam  scanning  requires  a  change  in  the  field  of  the  dipole  magnets  from  spill  to 
spill.  The  work  on  this  task  is  aimed  at  making  the  power  supplies  regulate  current 
better,  change  current  faster  and  readback  current  more  accurately. 

Work  performed  to  date: 

The  work  done  so  far  has  allowed  better  response  from  the  switchyard  dipoles,  better 
frequency  response  from  the  switchyard  quadrupole  supplies  and  better  offset,  gain  and 
readback  from  the  trim  magnet  supplies 
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Figure  1:  Project  Schedule 


Principal  Investigator:  Dr.  Richard  P.  Levy 


KEY  RESEARCH  ACCOMPLISHMENTS 

•  Completion  of  proof-of-concept  studies  on  injected  intensity  project. 

•  Completion  of  software  and  hardware  prototypes  for  injected  intensity  project. 

•  Completion  of  proof-of-concept  studies  for  noise  and  ripple  reduction. 

•  Produced  controllable  extraction;  extended  extraction  period. 

•  Significant  development  of  control  software  for  variable  energy. 

•  Development  of  firmware  for  selection  verification  device  for  fast-abort  system. 

•  Significant  development  of  test  and  diagnostic  utilities  software. 

•  Improved  response  of  switchyard  dipoles,  switchyard  quadrupole  supplies,  and 
trim  magnet  supplies. 


REPORTABLE  OUTCOMES 

N/A 

CONCLUSIONS 

Work  on  most  of  the  tasks  is  underway.  Requirements  and  design  work  has  been 
completed  on  most  of  the  open  tasks.  It  is  anticipated  that  the  proposed  work  will  be 
completed  on  schedule. 
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APPENDICES 

Appendix  A:  PBTS  Configuration  Management  System  Software  Failure  Modes  and 
Effects  Analysis  (Document  #3001496) 

Appendix  B:  A,  B,  C  type  power  supply  analysis  (Document  #2001779  Rev  B) 

The  appendices  referenced  above  are  attached  to  the  end  of  this  document.  Additional 
requirements  specifications,  design  documents,  and  other  analyses  supported  by  this 
project  are  available  upon  request,  including: 

•  Injected  Intensity  Software  Development  Plan  (Document  #3001 147) 

•  Injected  Intensity  Software  Requirement  (Document  #3001 148) 

•  Injected  Intensity  Software  Test  Plan  (Document  #3001 149) 

•  Injected  Intensity  Software  Design  Document  (Document  #30011 50) 

•  Injected  Intensity  Control  Sub-System  Requirement  Specification  (Document 
#2001694) 

•  Injected  Intensity  Instrumentation  and  Beam  Inhibit  Sub-System  Requirement 
Specification  (Document  #2001694) 

•  White  Paper.  Inquiry  For  a  Revised  Configuration  Management  System.  (Addresses 
the  needs  of  a  PBTS  configuration  management  system). 

•  White  Paper.  Database  Study.  (Identifies  the  available  options  for  data  storage  and 
the  pros  and  cons  of  those  options). 

•  PBTS  Configuration  Management  System  SRS  (Document  #3001447) 

•  PBTS  Configuration  Management  System  STP  (Document  #3001485) 

•  PBTS  Configuration  Management  System  HDD  (Document  #3001486) 

•  PBTS  Configuration  Management  System  SDD  (Document  #3001514) 

•  High  level  variable  energy  system  software  requirements  specification 

•  Revised  software  requirements  specifications  for  existing  modules 

•  High  level  software  design  for  variable  energy  system 

•  Revised  detailed  design  documentation  for  existing  modules 

•  Implementation  (for  newly  created  modules  and  revised  code  for  existing  ones) 

•  Test  Plan,  Test  Case  Specification,  Test  Scripts  and  Test  validation  reports  for  entire 
variable  energy  related  software  modules 
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1.0  Purpose 

The  purpose  of  this  document  is  to  evaluate  the  safety  aspects  of  the  Proton  Beam  Treatment  System 
(PBTS)  configuration  system  software  through  a  failure  modes  and  effects  analysis.  A  safety  hazard  can  be 
described  as  the  probability  of  an  undesirable  event  with  the  magnitude  of  foreseeable  consequences. 
Foreseeable  consequences  may  include  damage  to  equipment  or  reputation,  loss  of  money,  injury  to 
patients  or  personnel,  etc.  The  seriousness  of  these  consequences  may  range  from  negligible  to 
catastrophic. 


2.0  Scope  of  Document 

We’ll  first  provide  a  table  listing  failure  mode  probabilities  and  then  a  table  listing  a  hazard’s 
possible  severity.  Then  we’ll  identify  possible  failure  modes  and  list  their  probability,  severity 
level  and  how  they  can  be  mitigated. 


3.0  Reference  Documents 

To  support  this  failure  modes  and  effects  analysis,  the  following  reference  documents  should  provide  a 
better  understanding  of  PBTS  configuration  management  software  and  the  safety  aspects  of  the 
configuration  system. 

•  PBTS  Configuration  Management  System  Software  Requirements  Specification,  Document 
#3001447 

•  PBTS  Configuration  Management  System  High  Level  Design,  Document  #3001486 


4.0  Developing  the  Failure  Modes  and  Effects  Catalog 

This  catalog  is  a  qualitative  form  of  analysis  that  denotes  possible  failure  modes  associated  with 
the  PBTS.  The  catalog  contains  the  following  elements: 

•  Identification  of  failure  modes  and  their  associated  root  causes 

•  Evaluates  the  effects  of  each  failure  mode  towards  patients  and  operating  personnel 

•  Determines  the  probability  of  occurrence  level  for  each  failure  mode 

•  Categorizes  each  failure  mode  in  regards  to  level  of  severity. 


Failure  modes  are  categorized  by  functional  area.  Some  failure  modes  are  common  in  the 
software  regardless  of  functional  area  and  shall  be  listed  first.  These  are  generally  memory 
allocation  failures,  out  of  tolerance  conditions,  etc. 


5.0  Occurrence  Levels  and  Severity  Categories 
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Each  of  the  failure  modes  was  evaluated  for  probability  of  occurrence  levels  and  severity  categories.  This 
evaluation  process  is  summarized  in  the  below. 


Level 

Failure  Mode  Probability 
Of  Occurrence 

Failure  Mode  Occurrence  Description 

A 

Frequent 

Often  experienced  or  likely  to  occur 

B 

Moderate 

Several  times  experienced  or  occurring 

C 

Occasional 

Sometimes  experienced  or  occurring 

D 

Remote 

May  be  experienced  or  may  occur 

E 

Unlikely 

Unlikely  to  be  experienced  or  to  occur 

F 

Impossible 

Practically  impossible 

Hazard  Severity 

Failure  Mode  Effect  Description 

I 

Catastrophic 

Causes  death,  total  disability,  loss  of  company  image,  detrimental 
financial  loss,  system  loss 

II 

Critical 

Causes  severe  injury  with  partial  disability,  severe  loss  of  image, 
large  financial  loss,  partial  system  loss 

III 

Marginal 

Causes  injury,  transient  loss  of  image,  indirect  financial  loss, 
system  damage 

IV 

Negligible 

Causes  minor  injury,  minor  image  or  financial  loss,  minor  system 
damage 

Many  of  the  failure  modes  may  come  from  base  classes  and  support  classes  whose  failure  modes  have  already  been 
identified  in  the  PBTS  Software  Failure  Modes  and  Effects  Analysis.  They  will  not  be  re-stated  here. 


Failures  caused  by  operating  system  or  miscellaneous  programming  errors 
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Failure  Mode 

Cause 

Level 

Effect 

memory  allocation 
failed 

memory  full 

E 

inability  to 
proceed 

memory  allocation 
failed 

memory 

fragmentation 

A 

file  system  error 

os 

D 

system  halts 

division  by  0 

programming 

error 

D 

memory  leaks 


system  sluggish 


programming 

error 


exhaustive  error 

detection/ 

correction 


segmentation 

fault 


thrashing 


Mitigation 


IV  -  garbage 
collection 
-  smart  memory 
allocation  schemes 
for  Message, 
ByteString  classes 


Revised 

Level/Cat 


IV 

regular  system 
maintenance 

E/IV 

II 

code  review,  code 
test 

E/IV 

III 

code  review,  test 

E/IV 

IV 

code  review,  test 

E/IV 

III 

limit  error 
checking  to  critical 
errors  only,  focus 
on  recovery  (vs. 
correction) 

D/III 

Failure  modes  caused  by  user  error 


Failure  Mode 

Cause 

Level 

Effect 

Cat 

Mitigation 

Revised 

Level/Cat 

tolerance  values  are 
incorrect 

user  enters 

incorrect 

tolerances 

c 

possible  hazardous 
system  state 
wrong  dose  delivered 

hardware  tolerances 
exceeded 

ii 

protocol  with  checks 
for  changing 
configurations; 
compare 

configuration  values 
against  hardwired 
hardware  limits 

D/III 

values  specified  are 
out  of  tolerance 

user 

specifies 
out  of 
tolerance 
value 

B 

possible  injury  to 
patient  and  or  personnel 

possible  damage  to 
equipment 

software  will 

E/IV 

with  baseline  to 
ensure  tolerances  are 

met 

invalid  data  is  not 
trapped 

user  enters 
invalid  data 

B 

application  locks  up  or 
seg  fault  detected 

E/IV 

Database  Failure  Modes 
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Failure  Mode 

Cause 

Level 

Effect 

Cat 

Mitigation 

Revised 

Level/Cat 

Database  Server 
crashes 

network  problem 

internal  error, 
server  stops 
responding 

B 

treatment  and 
tuning  delayed 
until  back 
online 

Do  not  rely  on 
database  for 
retrieval; 

provide  file  system 
storage  where 
processes  will 

retrieve 

configuration  data 

E/IV 

Client  cannot 
connect  to  database 

server 

network  error 

c 

treatment  and 
tuning  delayed 

Do  not  rely  on 
database  for 
retrieval; 

provide  filesystem 
storage  where 
processor  will 

configuration  data 

E/IV 

Database  is 
corrupted 

server  crashed 
during  an  update 
to  data 

c 

user  changes 
not  saved 

data  may  not 
be  reliable 

III 

E/IV 

Failure  to  updated 
field 

field  is  in  more 
than  one  location 

B 

may  treat  with 

outdated 

information 

II 

E/IV 

Failure  Modes  when  generating  files 


Failure  Mode 


Cause 


Level 


Effect 


Cat 


Mitigation 


Revised 

Level/Cat 


Database  and 
Reports  are  out  of 
sync 


Report  was  never 
generated 


treatments 
proceed  with 
possibly 
outdated 
configurations 


III 


compare  data  and 
time  stamp_of 
database  and  file 


E/IV 


Generated  report  is 
corrupted 


Not  all  data  was 
written  to  file(s) 


treatment  and 
tuning  delayed 


II 


checksum  verifying 

files  against 
database 


E/IV 


Report  not 
generated 


No  space  left  on 
device 


D 


treatment  may 
be  delayed 


II 


Hard  drives  that 
exceed  our 
memory  needs 


E/IV 


NFS  Error  while 

generating  report 


Network  error 


D 


treatment  may 

be  delayed 


II 
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6.0 Failure  Mode  Mitigation 

The  mitigation  process  evaluates  the  failure  modes  and  effects  and  establishes  a  form  of  corrective  action  to 
reduce  their  risk.  Both  acceptable  and  unacceptable  failure  modes  are  mitigated  to  ensure  a  safer  system. 

7.0Summary 

The  primary  purpose  of  the  failure  modes  and  effects  analysis  is  to  determine  the  failure  modes  and  reduce 
their  associated  risks  as  much  as  possible.  Using  system  requirements  and  software  architecture,  the 
failure  modes  of  each  functional  area,  as  well  as  the  system  as  a  whole,  can  be  identified.  This  failure 
modes  and  effects  analysis  is  then  used  during  detail  design  to  insure  mitigation  is  included  in  the  design 
and  implementation. 
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A,B,C  type  power  supply 
analysis 

Used  for  "tuning"  an  instance  of  an  ABC  type  power  supply. 


This  is  a  Mathcad  generated  document. 


File:  Vert.  Trim 
SuodIv  tvne:  A 

Magnet  tvne:  SextuDole  magnet. 


Date:  5/17/00 


Author:  Greg  Jenkins  and  Darrin  Taylor 


Optivus  Technology.  Inc. 


A,B,C  type  power  supply  analysis 

The  INVERPOWER  supplies  used  in  the  accelerator  are  40  Khz  switching 
supplies.  These  supplies  use  multiple  converter  banks  in  parallel  to  provide  the 
total  power.  Each  bank  is  a  seperate  two  transistor  "Buck"  type  forward 
converter.  The  supplies  use  current  mode  feedback  in  the  inner  loop  and  voltage 
and  current  feedback  in  the  outer  loops.  This  MathCad  document  will  provide  an 
analysis  to  tune  the  feedback  loops  for  a  particular  type  and  instance  of  supply. 
This  analysis  assumes  that  all  modifications  have  been  made  to  the  MPI  board  to 
allow  true  current  mode  feedback  and  fix  other  problems  uncovered  during  this 
investagation  (see  related  documents).  The  design  criteria  for  the  compensators 
also  assumes  inductive  loads.  For  a  particular  type  of  supply  and  magnet,  update 
all  varables  and  identify  file,  supply,  magnet  and  date  on  cover  sheet  and  the 
modification  report  page  at  the  end  of  this  document.  The  modification  report  can 
then  be  used  for  updating  the  supply. 

Power  supply  parameters 

Max  Current  output  I  m : = 200 

Max  Voltage  output  v  m  :=  10 

Control  voltage  range  v  c  :  =  10 

Filter  and  load  model 


Load  resistance  and  inductance 
Filter  inductor  resistance  and  inductance 
Filter  capacitor  resistance  and  capacitance 
Input  line  filter  inductance  and  capacitance 


R  Q  :=35.7-mQ 
Rf  :=5-mQ 
Resr  :=20-m£i 
L  j  :=  l  mh 


L0  1.6- mh 
L  f  :  =  70-uh 
Cf  :=6100-uf 
Cj  :=3600  uf 


Note:  Type  A  supply  has  Cf=6100uf  and  B  &  C  supply  Cf=2000uf 
Transformer  model  Type  A  &  B  Li=lmh  and  Ci=3600uf. 

Type  C  supply  Li=1.3mh  and  Ci=10800uf 


R  :=1.8-Q 


N: 


20 


Transformer  and  line  primary  circuit  resistance 
Current  transformation  ratio 
Reflected  impedance  transformation  ratio 
Converter  model  Note:  Type  A  supply  is  Ni=20/3  and  B  &  C  supply  Ni=16/3 


Nz:=Ni 


Load  impedance  and  admitance  z0(s):-R0ts-L0 

Filter  capacitor  impedance  and  admitance  Z  c(s)  =  R  esr- 

sC  f 

Load  and  capacitor  in  parallel  YCo(s):  =  Yc(s)  +  Yols) 


y0<»> 

Yc(s) 

ZcoVL 


1 

Z0(s) 


1 

Zc(s) 

1 


cov 


Filter  inductor  impedance 

Total  secondary  impedance 

Reflected  primary  impedance 

Total  primary  impedance  and  admitance 


Z  [(s)  .“R  ^  +  s-L  ^ 


Zs(s)  -Zc0(sl  -  Zj(s) 

Zpts):  =  Zs(sVNz 

Z,ts>:  =  Rp  +  Zp(s)  Yt(s):  =  ^ 


1 


Inner  current  loop  foward  path 


Pulse  width  modulator 


The  PWM  gain  is  determined  by  the  peak  to  peak  amplitude  of  the 
clock  signal  at  the  comparitor  inside  the  UC3846  chip.  Measured 
at  pin  1  of  IC46: 

The  clock  is  divided  down  by  the  following  resisters:  R182  :=470  Q  R181  :=  l  k£2 


1.76-volts 


R147  -  390 


The  divide  ratio  is: 


/l  l 

R182-  — —  + -  +1 

\R181  R147  / 


If  both  outputs  of  the  UC3846  chip  are  used  this  creates  fall  frequency  (35  to  45 
Khz)  alternate  bank  firing  at  maximum  duty  cycle  (80  to  90%).  If  only  one  output  is 
used  then  only  half  frequency  simultaneous  firing  can  occure  with  reduced  gain  at 
half  the  maximum  duty  cycle.  Check  wiring  of  supply  and  set  b=l  for  both  or  b=2 
for  one  output  uiNote:  A  supply  is  b=2  and  B  &  C  supply  is  b=l 

The  maximum  duty  cycle  depends  on  the  duty  cycle  of  the  t , 

r.lnrk  sicmal  Mfiasnrp  fh#»  ri kp  timp  ft.nn'l  and  tbp  fall  t.ima  ftnfTl 
(See  "Oscillator  analysis"  at  end  of  this  document  to  calculate  these 
values)  * 

The  clock  frequency  and  f  l  .  __^on_ 

maximum  duty  cycle  are:  ck  on+  off  ck  t  k  max  t  + 1  off  cl 


1  on  +  1  off 


The  PWM  chip  has  an  amplifier  with  a 
gain  of  3  that  both  clock  and  feedback 

noao  fVi  rnn  rrV»  • 

Taking  into  account  the  3X 
gain,  the  final  gain  with  duty 
cycle  limiting  is: 


K 

pwm 


ckpp’dck ‘^pwm 


:  22.52- us 


t  off  := 4.41 -us 


fck  =  37.133 -khz 


dcmax=0-836 


®  pwm  _  0-212 


The  sampling  period  and  frequency  is: 


ts:=tck*b 


fs  t 
1  S 


The  sampling  effect  is  modeled  with  the  following  transfer  function: 

(The  main  significance  is  the  phase  lag  the  sampling  contributes  to  the  loop) 


Gs(s):=- 


fs  =  18.567  *khz 


Sampler  transfer  function 


Pl,  ffi  <3  m  pq 


Inner  current  loop  toward  path 


Input  line 

The  power  supply  input  is  a  3  phase  source  that  is  full  wave  (peak)  rectified  and 
filtered.  Line  to  neutral  is  120  volts  rms  making  208  volts  rms  line  to  line.  This  is 
modeled  as  a  gain  that  is  pulse  width  modulated. 

Line:  G  line  :=  120  ^3  volts  Three  phase  peak  rectifier  (gain):  G  peak  := ^2 

DC  voltage  to  the  converters  is:  G  line*G  peak  =  293.939  *voits 

The  input  line  filter  transfer  function  is:  Zj(s)  -s  Lj  +  Rp  Y ,(s) .  s  C  x  ^  ^ 

l  P 

Foward  path  gain  G ,1 s)  := - 

-  1  Zj(s)-Y  j(s)+ 1 

The  following  fudge  factor  was  created  to  match  the  model  with  masurments  made 

on  a  power  supply.  This  variation  is  attributed  to  energy  storage  and  loss  in  the 

primary  and  secondary  snubber  circuits,  transformer  and  inductor  core  losses  and 

parasatics  affecting  the  inner  loop  foward  path  (converter)  gain. 

ff  =  Fudge  factor  Gi  ff :  =  l .  1 3 


The  output  is  a  current  converted  from  a 
modulated  voltage  by  the  total  primary 

addmitance  of  the  converter.  Total  inner  loop  Gj(s)  =GpWm'G  sGs)'Gi  ff  G  line'G  peak'Y  t- s-) 

foward  path  gain  is: 

Open  loop  DC  voltage  to  current  gain  |Gj(.ooii)|  =  19.497 

from  pin  7  of  PWM  chip  to  primary  InDBs:  m(g  j(.ooii))  =  25.799 -DB 

current  is: 


Inner  loop  foward  path  Transfer  function 


71 


P 

H 

A 

S 

E 


-71 


3 


Inner  current  loop  feedback  path 


Primary  current 

Rfinsnr 

The  output  transformer  prymary  current  is  fed  back 
from  a  200:1  current  sense  transformer  with  a  turns 

rotin  r\- f* 

This  current  is  transformed  to  a  voltage  by  the  impedence  of  two 
4.7  ohm  resistors  in  series  creating  a  current  sense  resistance 

rvf  Q  A  nkmo 

Feedback  gain  factor  Ki 


Ns:  = 


1 

200 


Rs  :  =  2-4.7-£2 


There  is  a  current  transformer  for  each  bank  in  a  particular  supply.  These  are 
unity  gain  buffered  with  differental  input  op-amps  and  summed  togather  at 
IC40.  The  gain  Ki  of  IC40  is  set  by  resistor  R160  so  Ki  =  R160/R163  with  R163  :=  j  ,kQ 
R163  fixed: 

R160  is  used  to  set  the  feedback  path  gain  and  therefore  establishes  the 
closed  loop  gain  from  pin  7  of  the  PWM  chip  to  the  primary  of  the  output 
transformer.  A  3  volt  range  at  pin  7  should  correspond  with  the  max  current  out 
as  transfromed  from  primary  to  secondary.  This  current  is  either  load  limited  by 
the  max  voltage  or  current  limited  by  the  max  current  of  the  supply. 

Max  current  with  this  load  is:  —15  =  280.1 12  -amps 


Limit  to:  i  _  =  200  *amps  Secondary  current  or:  I  m  —  =  30  -amps  Primary  current 

m  N  : 


Therefore  the  closed  loop  gain  should  be  equal  or 
greater  than: 

/Rifin  xinll  kn  oolnnl  ofnrl  kolnnr  +<->  airfokiicV,  this  gain) 

Current  feedback  voltage  divider  and  gain 


1CX 


—  -  Gicx  =  10 


3-volts  Nj 


The  feedback  current  is  voltage  divided  by  the 
same  resistors  as  the  clock  divider  with  a  divide 

r»o  P  i  r\  rk-f* 

Feedback  path  gain 


R181 


t  1 


\R182  R147 


+  1 


Hi  ff  =  1.1 1 


Again  a  feedback  path  fudge  factor  was  needed  to  match  the  model  with  the 
supply.  We  do  not  have  a  good  excuse  for  this  other  than  both  factors  were 

nonrinrl 

Closed  loon  DC  gain 

R160  can  now  be  calculated  to  establish  the  desired  closed  loop  gain  Gicx.  Define  Gix  as 
the  foward  path  gain  at  DC  with  a  10%  low  line  condition: 

Gjx  =|Gj(.001’i  )  -0.9 


G  ix  G  icx 


K;  =  1.564 


Then  the  gain  of  IC40  must  be:  K:  := -  . 

N  S'R  s'^  i'K  pwm'^1  ffG  icx’G  ix 

Therefore  calculate  R160:  R160  =KrRl63  R160  =  1.564-kQ  Ri60:=1.6-kQ 

and  select  standard  value. 

By  superposition  the  feedback  passes  through  the  3X  gain  (Kpwm)  amplifier 
inside  the  chip  also.  The  total  inner  current  loop  feedback  path  gain  is: 

L  TT  /  -  \  —  \T 


K: 


R160 

R163 


Hi(sl  N  S-R  j-  K  j  d  j-K  pWm  Hi  ^ 


At  low  line  voltage  define:  G  jxts)  :-G  j(s)-.9 

Therefore  the  low  frequency  closed  loop  gain  at 
low  line  voltage  then  meets  the  requirements 
stated  above: 


The  closed 
loop  gain  is 
then: 


In  DBs: 


Gix(si 

Gic(s)  := - 

10  1  -  G  ix(s)-Hi(s) 

G  ic( .00 lil  =9.903 
M  Gjc(.001i'i  =  19.915-DB 
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Inner  current  loop  transfer  functions 


This  is  the  gain  at  full  output  G  _Gi(s)  Gpeak'Yt(s)  dcmax 

voltage  from  the  208  volt  line  11  l  +  G  io(s)  b 

to  primary  current,  showing 

sensitivity  (volts  to  amps)  to  @DC  ]g ^(.ooii)  =0.044  InDBs:  M^G  jj(.ooii)^  =-27.09  "DB 

line  varations: 


Voltage  loop  toward  path 


Voltage  loop  "plant11 

To  design  the  compensator  it  is  useful  1  to  look  at  the  "plant"  to  be 
compensated.  In  this  case  the  plant  is  made  up  of  the  inner  closed  loop 
function.  The  current  transformation  ratio  of  the  transformer,  and  the  current  to 
voltage  transformation  impeadance  of  the  filter  capacitor  and  load  in  parallel. 
Plant  transfer  function:  Pv(s)  :=Gjc(s)-Nj-Zc0(s) 


n 


P 

H 

A 

S 

E 


This  pole  will  be  used  to  set  the  zero  of  the  compensator. 

Observation  only:  there  is  a  pole/zero  cancellation  by  - *  =  50.944  *hz 

the  product  of  Gic  and  Zco  at  (again  only  aproximated):  2-k-Jl  0-C  f 


Compensator  design 


The  function  of  the  compensator  is  to  provied  high  loop  gain  at  low  frequencies  to 
reduce  static  error  and  provide  a  zero  to  help  cancel  the  Lf,  Cf  pole  shown  above.  A 
pole  will  be  placed  above  the  zero  to  attinuate  high  frequency  noise. 


Select  R210  for  the  required  open  loop  gain  for  crossover  at  90  degrees 
phase  margin  and  C108  for  both  convenience  and  reasonable  R247  value: 


(Note:  R148=R149=R151=R210) 
(&  C109=C108  &  R248=R247) 
R247  will  be  calculated  to  cancel  the 
Select  standard  value: 


R210  :=20kQ  C108:=1.0  uf 


Lf,  Cf  pole  in  the  plant:  R247  =— — ./LfC  f 

C108  ’ 


R247=  0.653  *kQ 
R247  :  =  0.665  k£2 


C67  will  be  calculated  to  be  some  factor  above 
the  zero:  (factor  not  critical  but  C68  =  C67  must 

The  resulting  transfer  function  of  the  compensator  is: 


C67=™« 

10 


C67  =  100  *nf 
C67  100-nf 


Cv(s) 


S-C67-- 


R247  4-  - 


1 


S-C108 


R210 


The  zero  and  pole  frequency 
of  this  function  is: 


- - - =  239.331  *hz 

2-7T-C108-R247 


C67-C108 


2-K'C67'Cl08-R247 


2.633 -khz 


The  "flat  portion"  gain  is: 


R247 

R210 


=  0.033 


In  DBs: 


/R247\  __29  564  -DB 
\R210, 
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Voltage  loop  toward  path 


Compensator  transfer  function 


The  total  foward  path  consist  of  the  compensator,  inner  loop  (closed),  transformer  current 
transformation  ratio,  and  a  current  to  voltage  transformation  impeadance  consisting  of  th 
filter  capacitor  and  load  (ie  the  plant  as  described  above). 

Gv(s):=Cv(s)Gic(s)NrZco(s) 

Or:  Gv(s):=Cv(s)-Pv(s) 

Voltage  loop  foward  path  transfer  function 


Feedback  path  gain 

At  low  frequencies  the  foward  path  gain  is  high  so  the  feedback  path  gain  sets 
the  closed  loop  gain.  In  this  case  its  a  constant  set  by  the  control  voltage  to 
maximum  ouput  voltage  ratio. 


Feedback  gain  is: 

K  v  =  1 

Closed  loop  gain  is  then: 

—  =  1 

K ,, 
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H  co  >  £  hd  a  J,  M  CO  >  K  hd 


Voltage  loop  transfer  functions 

Voltage  loop  open  Gvo(s)  =Gv(s)  Kv 


desireable: 


Voltage  loop  closed  Gvc(s):= - - -  |Gvc(i  -.001 )  =1 

1  +•  G  vo(s) 


M  cq  >  K  hd  »  ^  H  cq  >  ®  hd 


1  ,  » 

Current  loop  toward  path 

Current  loop  "plant" 

Again  to  design  the  compensator  it  is  usefull  to  look  at  the  "plant"  to  be 
compensated.  In  this  case  the  plant  is  made  up  of  the  voltage  closed  loop 
function  and  the  voltage  to  current  transformation  admittance  of  the  load. 

Plant  transfer  function:  P c(s)  =  G  vc(s)  Y  0( s) 


n 


P 

H 

A 

S 

E 


This  pole  can  be  canceled  by  the  zero  of  the  compensator. 


Compensator  design 

The  function  of  the  compensator  is  to  provied  high  loop  gain  at  low  frequencies  to 
reduce  static  error  and  provide  a  zero  to  help  cancel  the  Ro,  Lo  pole  shown 
above.  A  pole  will  be  placed  above  the  zero  to  attinuate  high  frequency  noise. 

Select  R222  for  the  required  open  loop  gain  for  crossover  at  90  degrees 
phase  margin  and  C107  for  both  convenience  and  reasonable  value  of  R246: 

(Note:  R196  =  R222)  R222  :=20  kQ  C107  :=  l  uf 

Lo 

R203  will  be  calculated  to  cancel  the  Ro,  Lo  pole  in  the  plant:  R246  :=- -  R246  =  44.818  *kQ 

d07  Ro  R246  :  =  44.2-k£2 


C93  will  be  calculated  to  be  some  factor  above  C93  := -  C93  =  100  *nf 

the  zero:  (not  critical)  10  C93  =  100'nf 


The  resulting  transfer  function  of  the  compensator  is: 


C  c(s)  :  =  T 


S-C93  -t-  - 


R246  +  ■ 


■R222 


S-C107/ 


The  zero  and  pole  frequency 
of  this  function  is: 


- - - =  3.601  *hz 

2-JI-C107-R246 


C93  -  C 1 07 


=  39.609  *hz 


2-IC-C93C107-R246 


The  "flat  portion"  gain  is: 


R246 

R222 


=  2.21 


In  DBs: 


R246\ 

M  =  6.888 -DB 

R222  / 
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k  ,  • 

Current  loop  toward  path 


Compensator  transfer  function 


The  total  foward  path  consist  of  the  compensator,  voltage  loop  (closed)  and 
the  voltage  to  current  transformation  admitance  of  the  load  (ie  the  plant  as 
described  above). 

Gc(s):=Cc(s)-Gvc(s)-Y0(s) 

Or:  Gc(s):=Cc(s)-Pc(sj 


Current  loop  foward  path  transfer  function 


Feedback  path  gain 

At  low  frequencies  the  foward  path  gain  is  high  so  the  feedback  path  gain  sets 
the  closed  loop  gain.  In  this  case  its  a  constant  set  by  the  control  voltage  to 
maximum  ouput  current  ratio. 


K, 


Feedback  gain  is:  K  c  =0.05 

Closed  loop  gain  is  then:  —  =  20 

Kc 
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t=j  CO  >  X  ^  s  n  M  >  a  TJ 


Ph  K  <1  co  H  s  fL,  [H  <3  co  W  f  pa  K 


Stability  plots 

Time  domain  analysis  showed  that  90  degree  phase  margins  gave  good  step 
response  so  stability  should  be  good.  Here  is  the  Nyquist  plots  for  all  three  loops 

frtV  o  mriolr 

Nyquist  chart 

scale  :=ceil(— )  Py(x)  :=  if(|x|  >10’scalc,log(|x|  •10scale) ,  1 0” scale) - sinf arg( x ) )  m  :-0..  scale-2  a  := 0 2-71 

\20 I  36 

Px(x)  :=if(|x|  >10"scale,log(|x|-10scale),10'scale)  cosfarg(x))  g(a,m)  :=e‘  am 

This  is  a  polor  plot  of  the  open  loop  gains  of  each  feedback  loop.  Unlike  most 
Nyquist  plots  the  magnitude  scale  on  this  plot  is  logrithmic  with  each  circle 
representing  20  DBs  (xlO)  or  one  log  cycle.  The  -1  gain  point  (0  DBs  @  180 
degrees)  is  marked  with  an  X.  If  any  feedback  loop  gain  line  encircles  this  point 
the  loop  will  be  unstable.  The  points  of  the  magnitude  scale  (circles)  are  10 
degrees  apart  so  the  phase  margin  can  be  estimated  by  the  nimber  of  degrees 
between  the  -1  mark  (X)  and  where  the  open  loop  gain  line  crosses  the  -1  gain 
circle.  The  gain  margin  is  the  magnitude  of  the  distance  between  the  -1  mark 
and  where  the  gain  line  crosses  the  horizontal  axis  on  the  negitive  side. 
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Over  current  shutdown 

The  PWM  chip  (UC3846)  has  an  over  current  shut  down  input  (SD)  on  pin  16. 

At  a  voltage  of  350mv  on  this  pin  the  chip  will  cut  off  the  pulse  outputs.  IC40  pin 
6  is  connected  to  pin  16  through  a  voltage  divider  with  a  divide  ratio,  including 
internal  6K  resistor,  of: 

R165  :=20  kQ  R220  :=6.19  k£2  d  := - — - - - 

R165-/-!— +  _!_\ 

\R220  6-kQ  j 

Working  backwards  around  the  loop,  shut  down  will  occure  at  a  total 
transformer  primary  current  (the  sum  of  all  banks  firing  simultaneously)  of: 

Isdp  :=(350-mv)-J--J— -  I sdp  =  30.552 ‘amps 

dsd  Ns  Ks'Ki 

This  translates  to  a  total  transformer  secondary  current  of:  Isds  :=Isdp'Ni  Isds=203-681,amPs 


The  switching  (Mosfet)  transistors  are  rated  at  44  amps  continuous  current. 

Peak  pulse  current  rating  is  165  amps,  see  data  sheet.  "A"  type  supplies  use 
one  to  carry  the  full  primary  current.  The  B  and  C  supplies  use  two  in  parallel  for 
88  amps  max  current.  The  transformer  primary  and  secondary  current,  for  each 
bank,  required  by  the  load  depends  on  the  number  of  banks  firing  at  the  same 
time.  The  full  output  current  requirements  for  each  supply  type  and  mode 
(simultaneous/altemate)  option  are: 


Type/current 

mndp 

Total  # 

hanks 

#  firing 

simnlt.anpnusly 

Secondary  current 

npr  hank 

Primary  current 

npr  hank 

*  A/200amps 
simultaneous 

2 

2 

100  amps 

3 

100 —  =  15*amps 

20 

A/200amps 

alternate 

2 

1 

200  amps 

3 

200 —  =  30 ’amps 

20 

B/250  amps 
simultaneous 

2 

2 

125  amps 

125-—  =23.438 -amps 
16 

*  B/250  amps 
alternate 

2 

1 

250  amps 

250-—  =  46.875  *amps 
16 

*  C/750  amps 
alternate 

6 

3 

250  amps 

250*—  =  46.875  ’amps 
16 

The  highest  current  is  the  B  and  C  type  supply  with  two  transistors  using  46.8 
amps  out  of  88  max.  Next  is  the  A  supply  running  in  alternate  mode  using  30 
amps  out  of  44  amps  max  (single  transistor).  The  other  cases  are  50%  or  less 
of  maximum  continuous  currents.  Any  one  bank  is  limited  to  about  45% 
maximum  duty  cycle  independent  of  simultaneous  or  alternate  mode  firing. 
Therefore  the  transistors  are  pulsed  at  45%  max  duty  cycle,  so  the  use  of 
continuous  current  ratings  is  very  conservative. 

The  *  represents  the  way  the  three  supplies  are  currently  wired  to  operate. 
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PWM  chip  Oscillator  analysis 


The  UC1846  PWM  chip  uses  an  internal  oscillator  circuit  to  create  a  ramp  signal. 

This  is  compared  with  the  error  signal  at  pin  7  to  create  the  pulse  width 
modulated  output  signal.  The  varations  in  perameters  from  chip  to  chip  make  it 
hard  to  calculate  the  frequency  and  "dead  time"  for  a  particular  chip.  For  this 
reason  measured  values  are  used  in  the  above  analysis.  The  following  analysis 
can  be  used  for  calculated  values  if  needed  but  the  masured  results  may  vary  due 

Theory:  A  constant  current  is  used  to  charge  a  capacitor  Ct  (C66  pin  8)  to  an 
upper  threshold.  Then  a  discharge  current  is  switched  on  until  a  lower  threshold  is 
reached.  The  upper  and  lower  threshold  is  not  specified  in  the  data  sheet  and  will 
vary  from  chip  to  chip  but  was  masured  to  have  a  delta  of  about  1.76  volts. 

"Deadtime"  is  the  discharge  time  and  a  sync  signal  on  pin  10  has  a  width  equal 
to  this  time.  The  charge  current  is  set  by  resistor  Rt  (R143  pin  9)  through  a  current 
mirror  that  is  referenced  to  Vref  (pin  2)  at  5.1  volts.  The  voltage  at  pin  9  across  Rt 
is  two  diod  drops  (2*Vd)  down  from  Vref  and  sets  the  charge  current.  During 
discharge  this  current  subtracts  from  the  discharge  current.  The  discharge  current 
Id  is  shown  in  the  data  sheet  as  12  ma  but  was  masured  in  one  case  as  7.3  ma. 
Oscillator  frequency  is  not  critical  (40Khz  +-5  will  do)  but  deadtime  and  therefore 
maximum  duty  cycle  must  be  known  to  set  the  inner  loop  gain. 

Use  or  set  the  following  values:  Rt:=3.01kf2  Ct=15.35-nf  AV  :=  1.76- volts  Vref:=5.1 

Notes:  Rt  is  R143  and  Ct  is  C66. 
delta  V  is  the  peak  to  peak  clock 
signal  measured  at  pin  8. 


Id  :=7.324-ma  Vd  =0.745 


The  voltage  across  Rt  is  Vr: 

Vr :  =  Vref  -  2-Vd 

Vr  =  3.61 

Charge  current  Ion  is: 

r  Vr 

Rt 

Ion  =  1.199  *ma 

Discharge  current  Ioff  is: 

Ioff  :=  Id  -Ion 

Ioff  =  6.125  *ma 

Rise  time  ton  is: 

A__  Ct 
ton  :  =  AV - 

ton  =  22.526  *us 

Ion 

Fall  time  or  deadtime  toff  is: 

toff -Av¬ 

toff  =  4.411*us 

ion 

Total  period  is: 

1 1 = ton  +-  toff 

t  =  26.937  *us 

Oscillator  frequency  is: 

f  :=  — 

t 

f  =  37.124  *khz 

Deadtime  toff  sets  the  maximum 

ton 

QC _ _  . - 

dc  o v  =  0.836 

duty  cycle  to: 

max  ,  .  „ 

ton  -  toff 

max 

To  match  a  measured  supply  with  this 

calculation  measure 

Vref  at  pin  2  and 

set  above  then  measure  Vr  at  pin  9  and  set  here.  Then  Vd  will  be: 

Measured  Vr: 

Vr  =3.61  ... 

Vd 

Vref- 

2 

^  Vd  = 

Then  Ct  can  be  adjusted  for  ton  and  Id 

can  be  adjusted  for 

toff  as  i 

measured. 

Or  just  calculate  thus:  Measured  ton: 

ton  =22.526- us 

_  ton- Ion 

Ct  =  1 

AV 

Measured  toff: 

toff  =4.411 -us 

Id  • 

AV-Ct  ..  . 

r. - +  Ion  Id  =  i 

toff 


These  values  can  then  be  plugged  in  above  to  get  you  in  the  ballpark.  A  side 
note,  the  data  sheet  formulas  did  not  seem  to  be  very  accurate. 


volts 
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Variables  and  constants  used 


Power  supply  parameters 

I  m  Max  Current  output 
v  m  Max  Voltage  output 
V  c  Control  voltage  range 

Filter  and  load  model 

R  Load  resistance 
L  0  Load  inductance 

r  f  Filter  inductor  resistance 

L  f  Filter  inductor  inductance 

R  esr  Filter  capacitor  effective  series 

C  f  Filter  capacitor  capacitance 


Sampling 

t  Sampler  period 
f  Sampler  frequency 
G  s(s)  Sampler  transfer  function 

Input  line 

G  ,ine  Three  phase  line  (gain) 

G  peak  Peak  rectifier  (gain) 

Primary  current 

■N^isor  Current  sensor  turns  ratio 
R  s  Current  sense  resistor 

Inner  current  loop 


Transformer  model 

R  Transformer  and  line  primary  circuit  resistance 
Nj  Current  transformation  ratio 
N  Reflected  impeadance  transformation  ratio 

Converter  model 

Z  D(  s )  Load  impedance 

Y  0( s)  Load  admittance 

Zc(s)  Filter  capacitor  impedance  and  admittance 

Y  c(  s )  Filter  capacitor  admittance 

Yco(s)  Load  and  capacitor  in  parallel  admittance 
Zco(s)  Load  and  capacitor  in  parallel  impedance 
Z  j(  s )  Filter  inductor  impedance 
Zs(s)  Total  secondary  impedance 
Zp(s)  Reflected  primary  impedance 
Z  t(s)  Total  primary  impedance 

Y  t(s)  Total  primary  admittance 

Pulse  width  modulator 


Giff 

Foward  path  fudge  factor 

Gj(s) 

Total  foward  path  gain 

Ki 

Feedback  gain  constant 

d, 

Feedback  path  divider 

Hiff 

Feedback  path  fudge  factor 

H  j(s) 

Total  feedback  path  gain 

Gio00 

Open  loop  gain 

Gic(s) 

Closed  loop  gain 

G0(s) 

Closed  loop  line  sinsitivity 

Voltage  loop 

Pv(s> 

Foward  path  "Plant"  gain 

cv(s) 

Loop  compensator 

Gv(s) 

Total  foward  path  gain 

Kv 

Feedback  gain  constant 

G vo(s) 

Open  loop  gain 

Gvc(s) 

Closed  loop  gain 

G  vi(s) 

Closed  loop  line  sensitivity 

ckPP 

PWM  peak  to  peak  clock  amplitude 

Current  loop 

b 

PWM  "outputs  used"  switch 

Pc(s) 

Foward  path  "Plant"  gain 

dck 

PWM  clock  divider  ratio 

Cc(s) 

Loop  compensator 

pwm 

3X  amp  gain  in  PWM  chip 

Oc(s) 

Total  foward  path  gain 

*  on 

Clock  rise  time  period 

K  e 

Feedback  gain  constant 

1  off 

Clock  fall  time  period 

GcoO) 

Open  loop  gain 

lck 

Total  clock  period 

Gcc(s) 

Closed  loop  gain 

fck 

Clock  frequency 

Gcl(s> 

Closed  loop  line  sensitivity 
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Define  functions  (Tools) 

Q=\  k£2=103  mQ  =  1 0’ 3  mh^O'3  uh  =  10'6  mf=10'3  uf=10'6  nf=10'9 

khz=  103  hz=l  amps  =  1  volts^I  DB  =  1  us  =  l(T6  mv^lCf3  ma=10"3 

start  =  0.1hz  end^lOOkhz  points  =  300  n  =  0..  points  -  1  . log(end)  -  log(start)  ,  _inninc  + iog(  start) 

M(x)=20Iog(  | x | )  db  =  60  scale  P(x)  =  arg(x) —  points 


Related  documents 

1)  "LLUMC  Proton  Power  Supply  System  Study",  Doc  #  2001151 

2)  "Electronic  Schematic  Magnet  Power  Inverter"  Doc  #  2001142 

3)  "Electric  Schematic  PDC  Output  Interface"  Doc  #  2001143 
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Note:  If  J12,  J13,  Jll  and  J10  sockets  are  not  in  good  condition  and 
"Tight",  remove  the  sockets  and  solder  the  componets  in. 


Remove  D72,  D73,  D78,  D79,  D85,  D86,  D90,  D91  and  replace  each  with  two  diodes  in  series 
so  a  two  diode  drop  occurs  instead  of  a  one  diode  drop. 


Rev:B  Power  Supply  Modification  Report  Fiie:Vtrim 

Doc  #  2001779  SuddIv  tvoe:  A 

Magnet  tvne:  Vert  Trim 
Date:  5-17-00 


This  modification  is  for  a  power  supply  with  the  following  parameters 

Max  Current  output 
Max  Voltage  output 
Load  resistance  and  inductance 
Over  current  shutdown  current: 


The  following  componets  provides  the  "tuning"  for  the  parameters 
fisted  above.  Perform  modifications  below  if  required  and  install  the 
following  parts  for  this  "tuning".  See  the  updated  schematics. 


Inner  current  loop  gain 

IC40  feedback  resistor: 

R160  =  1.6’kQ 

Qty  Reqd. 

1 

Voltage  loop  compensator 

R148=R149=R151=R210: 

R210  =20’k£2 

4 

C108  is  installed  in  J10 
near  SW1. 

C109  is  added  in  series 
with  R248  across  resistor 

R149. 

C108=C109: 

C108  =  1  *uf 

2 

R247  is  installed  in  Jll  near 
SW1. 

R247=R248: 

R247=  0.665  *kQ 

2 

I  m  =  200 

Vm  =  l° 


R  0  =  35.7  *mQ 


L  Q  ~  1.6'mh 


I$(js  =203.681  *amps 


C67=C68:  C67  =  i00*nf  2 

Current  loop  compensator  R196=R222:  R222  =  20*kQ  2 

C107  is  installed  in  J 13  near  SW3.  C107  =  1  *uf  1 

R246  is  installed  in  J12  near  SW3.  R246  =44.2-kQ  1 

C93  =  100’nf  1 


Over  current  shutdown 


R165  =20*kQ 


Modifications 


R220  =6.19*kfi 


Check  to  see  if  the  following  modifications  to  the  MPI  board  have 
been  done.  If  not,  perform  the  following  procedure  to  bring  the 
board  up  to  date. 

Remove  the  following  parts:  C73,  C74,  C77,  C79,  C80,  C84,  C86,  C87,  C96, 

C98,  C99,  C102,  C104,  C105,  C88,  IC40  (OP77), 
IC46  (MC1458). 

Remove  (unplug)  SW1  and  SW3  dip  switches. 


Replace  OP-AMPs: 


Install  AD711  op-amp  for  IC40 
Install  AD712  op-amp  for  IC46 

Replace  and/or  add  the  componets  listed  in  the  "tuning"  section  above.  Some  of 
the  parts  are  new  and  installed  as  follows: 


Note:  Move  any  large  filter 
capacitors  from  output  bus 
to  bus  bars  in  front  of  LIM! 
(A  supply  has  two  lOOOuf) 


R246  in  J12,  C107inJ13,  R247  inJll.  C108 
in  J10.  R248  is  soldered  in  series  with  C109 
and  the  pair  soldered  across  R149.  Keep  leads 
short  and  install  on  componet  side  of  board  (see 
new  schematics) 


1 

1 


